Lucene search

K
cvelistMitreCVELIST:CVE-2008-1304
HistoryMar 12, 2008 - 5:00 p.m.

CVE-2008-1304

2008-03-1217:00:00
mitre
www.cve.org
2

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

74.8%

Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php.

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

74.8%